StackRadar

puppetserver 1.0.1 Helm chart

camptocamp3

Scored 14 Sept 2026

A Helm chart for Kubernetes

Version 1.0.1 11 days agodeploys tag 8.7.0-main 0Artifact Hub

puppetserver 1.0.1 deploys 2 container images: camptocamp/jmx-exporter and ghcr.io/voxpupuli/puppetserver. Across them, 499 findings — 5 critical, 6 high — 2 on CISA KEV. The highest contribution is GHSA-mjmj-j48q-9wg2 in snakeyaml 1.16, fixed in 2.0.

Radar Score

5,8865688399

499 findings over 2 of 2 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
camptocamp/jmx-exporter0.12.01151237
ghcr.io/voxpupuli/puppetserver8.7.0-main45833985,649

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

88 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-5cqm-crxm-6qpvcgi@0.2.00.2.1
MediumUBUNTU-CVE-2024-5535openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2026-45447openssl@3.0.2-0ubuntu1.183.0.2-0ubuntu1.25
MediumUBUNTU-CVE-2025-26465openssh@1:8.9p1-3ubuntu0.101:8.9p1-3ubuntu0.11
MediumGHSA-v5h6-c2hv-hv3rstringio@3.0.03.0.1.1
MediumUBUNTU-CVE-2021-46848libtasn1-6@4.18.0-4build14.18.0-4ubuntu0.2
MediumGHSA-vc47-6rqg-c7f5cgi@0.2.00.2.2
MediumGHSA-qg54-694p-wgppdate@3.1.03.1.2
MediumUBUNTU-CVE-2017-11164pcre3@2:8.39-13ubuntu0.22.04.1no fix listed
MediumGHSA-4vf4-qmvg-mh7hcgi@0.2.00.2.1
MediumUBUNTU-CVE-2024-4741openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2026-3497openssh@1:8.9p1-3ubuntu0.101:8.9p1-3ubuntu0.14
MediumGHSA-3mc7-4q67-w48msnakeyaml@1.161.31
MediumUBUNTU-CVE-2022-24975git@1:2.34.1-1ubuntu1.12no fix listed
MediumGHSA-hv5j-3h9f-99c2uri@0.10.10.10.2
MediumUBUNTU-CVE-2026-19931curl@7.81.0-1ubuntu1.20no fix listed
MediumGHSA-fg7x-g82r-94qctime@0.1.00.1.1
MediumUBUNTU-CVE-2022-40735openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2016-20013glibc@2.35-0ubuntu3.8no fix listed
MediumUBUNTU-CVE-2023-31486perl@5.34.0-3ubuntu1.3no fix listed
MediumUBUNTU-CVE-2018-5709krb5@1.19.2-2ubuntu0.4no fix listed
MediumGHSA-fj7f-vq84-fh43bundler@2.2.222.2.33
MediumUBUNTU-CVE-2016-20012openssh@1:8.9p1-3ubuntu0.10no fix listed
MediumUBUNTU-CVE-2023-25193harfbuzz@2.7.4-1ubuntu3.12.7.4-1ubuntu3.2
MediumGHSA-9w3m-gqgf-c4p9snakeyaml@1.161.32
MediumUBUNTU-CVE-2026-18924curl@7.81.0-1ubuntu1.20no fix listed
MediumUBUNTU-CVE-2022-4899libzstd@1.4.8+dfsg-3build1no fix listed
MediumUBUNTU-CVE-2023-5678openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2025-9230openssl@3.0.2-0ubuntu1.183.0.2-0ubuntu1.20
MediumUBUNTU-CVE-2026-11856curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.26
MediumUBUNTU-CVE-2023-6129openssl@3.0.2-0ubuntu1.18no fix listed
MediumUBUNTU-CVE-2026-8925curl@7.81.0-1ubuntu1.207.81.0-1ubuntu1.25
MediumGHSA-j288-q9x7-2f5vcommons-lang@2.6no fix listed
MediumGHSA-j288-q9x7-2f5vcommons-lang3@3.14.03.18.0
MediumGHSA-q339-8rmv-2mhverb@4.0.24.0.3.1
MediumUBUNTU-CVE-2026-41316ruby3.0@3.0.2-7ubuntu2.8no fix listed
MediumGHSA-2rxp-v6pw-ch6mrexml@3.2.53.3.9
MediumGHSA-jr6h-r7vg-f9mcini4j@0.5.4no fix listed
MediumUBUNTU-CVE-2025-30749openjdk-17@17.0.13+11-2ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.1
MediumGHSA-c4r9-r8fh-9vj2snakeyaml@1.161.31
MediumUBUNTU-CVE-2026-42009gnutls28@3.7.3-4ubuntu1.53.7.3-4ubuntu1.9
MediumUBUNTU-CVE-2026-63076openssl@3.0.2-0ubuntu1.183.0.2-0ubuntu1.29
MediumUBUNTU-CVE-2025-59375expat@2.4.7-1ubuntu0.52.4.7-1ubuntu0.7
MediumUBUNTU-CVE-2024-8176expat@2.4.7-1ubuntu0.52.4.7-1ubuntu0.6
MediumGHSA-r55c-59qm-vjw6rexml@3.2.53.3.3
MediumUBUNTU-CVE-2026-33846gnutls28@3.7.3-4ubuntu1.53.7.3-4ubuntu1.9
MediumUBUNTU-CVE-2024-0727openssl@3.0.2-0ubuntu1.18no fix listed
MediumGHSA-355h-qmc2-wpwfjetty-http@10.0.2010.0.28
MediumGHSA-g857-hhfv-j68wzlib@1.1.03.0.1
MediumUBUNTU-CVE-2026-27820ruby3.0@3.0.2-7ubuntu2.8no fix listed

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.1latest11 days ago8.7.0-main56883995,886

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/camptocamp3/puppetserver.svg)](https://charts.stackradar.io/charts/camptocamp3/puppetserver)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.